3 ms·
> "Protecting" records by making IDs hard-to-guess just seems like putting the responsibility in the wrong place. It's a pretty powerful implementation of capa
by insanitybit 4y ago
> "Protecting" records by making IDs hard-to-guess just seems like putting the responsibility in the wrong place.
It's a pretty powerful implementation of capability based security.
- yellowapple 4y agoI would hope that a capability-based security system entails considerably more than just knowledge of an ID.
- yencabulator 4y agoMany actual capability systems explicitly construct their capabilities to be unforgeable by not making them be mere secret byte strings, but objects protected by the kernel or other environment. For example, https://www.cs.cornell.edu/courses/cs513/2000SP/L08.html https://www.cs.cornell.edu/courses/cs513/2000SP/L08.html And then people naively copy operating system design methodology into web APIs... Unrevokable leakable know-it-and-you're-in secrets are a bad idea.